5.1

Working with Certificates
vShield Edge supports self-signed certificates, certificates signed by a Certification Authority (CA), and
certificates generated and signed by a CA.
Configure a CA Signed Certificate
You can generate a CSR and get it signed by a CA. If you generate a CSR at the global level, it is available to
all vShield Edges in your inventory.
Procedure
1 In the vSphere Client, select Inventory > Hosts & Clusters.
Option Description
To generate a global certificate
a Click Settings & Reports from the vShield Manager inventory panel.
b Click the SSL Certificate tab.
To generate a certificate for a vShield
Edge
a Select a datacenter resource from the inventory panel.
b Click the Network Virtualization tab.
c Click the Edges link.
d Double-click a vShield Edge.
e Click the Configure tab.
f Click the Certificates link.
g Click Actions and select Generate CSR.
2 Type your organization unit and name.
3 Type the locality, street, state, and country of your organization.
4 Select the encryption algorithm for communication between the hosts.
Note that SSL VPN-Plus only supports RSA certificates.
5 Edit the default key size if required.
6 For a global certificate, type a description for the certificate.
7 Click Generate (at global level) or OK (at vShield Edge level).
The CSR is generated and displayed in the Certificates list.
8 Have an online Certification Authority sign this CSR.
9 Import the signed certificate.
Option Description
To import a signed certificate at the
global level
a In the SSL Certificates tab of the vShield Manager user interface, click
next to Import Signed Certificate.
b Click Browse and select the CSR file.
c Select the certificate type.
d Click Apply.
To generate a certificate for a vShield
Edge
a Copy the contents of the signed certificate.
b In the Certificates tab, click Actions and select Import Certificate.
c In the Import CSR dialog box, paste the contents of the signed certificate.
d Click OK.
The CA signed certificate appears in the certificates list.
Chapter 9 vShield Edge Management
VMware, Inc. 67